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EXTENDING THE PROMISE OF THE DEUTSCH-JOZSA-H0YER 
ALGORITHM FOR FINITE GROUPS 

MICHAEL BATTY, ANDREW J. DUNCAN AND SAMUEL L. BRAUNSTEIN 

Abstract 

H0yer has given a generalisation of the Deutsch-Jozsa algorithm 
which uses the Fourier transform on a group G which is (in general) 
non-Abelian. His algorithm distinguishes between functions which 
are either perfectly balanced (m-to-one) or constant, with certainty, 
and using a single quantum query. Here, we show that this algorithm 
(which we call the Deutsch-Jozsa-H0yer algorithm) can in fact deal 
with a broader range of promises, which we define in terms of the 
irreducible representations of G. 



1 . Introduction 



bJQ. 

Recall that a function / : {0,1}" -> {0, 1} is called balanced if \f- l (0)\ = \f- l (l)\ = 
■^3" 1 . Deutsch's algorithm 1 5 1 distinguishes between constant and balanced functions from 
^j<X 1} to itself using a single quantum query, whereas classically two queries are required. 

A function from {0, 1} to itself is always either balanced or constant. However, to gener- 
C&ise to functions {0, 1}" — > {0, 1}, Deutsch and Jozsa |6| realised that we must restrict the 

£tass of functions condsidered. They showed that we can distinguish between constant and 
J balanced functions {0, 1}" — ► {0, 1}, again in a single query, but if we are given a function 
p™ , 1}" — > {0, 1} which is neither constant nor balanced, then we can't deduce anything 
£"fr})m the output of the quantum circuit. Thus, we must be promised that the function is 
either constant or balanced; then we can use the circuit to deduce something. 

It was first realised by H0yer that the mathematics underlying the Deutsch-Jozsa algo- 
■3flihm is group-theoretic in nature. In 1121 . he remarks that if we replace the discrete Fourier 
FSansform on employed in the Deutsch-Jozsa algorithm by the Fourier transform on an 

^Hitrary finite group, then we can distinguish between constant and perfectly balanced 
"junctions. In this paper we show that the range of functions which can be distinguished 

aZJbroader than this, provided that we make corresponding promises. These promises are 

jSpresentation-theoretic in nature, further reflecting the role played by finite groups in the 

Oetatsch-Jozsa circuit. 

The definitions of the types of functions we consider seem at first sight somewhat tech- 
• irtcal and perhaps unnatural. However, given a map / : X — > H, where H is a finite group 
rwe associate an element r of the integral group ring 7LH to / in such a way the promise on 
-function becomes a promise on the element r; namely that r lies in one of two subsets 

of r £H which have natural and straightforward descriptions (see Section|4}. 

In the case of functions / : X — > A where A is an Abelian group our promises can be 

described in terms of a polynomial Pf associated to /. In fact, as we show in Section^] our 

representation-theoretic promise is equivalent to the promise that Pf is either monomial or 
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is divisble by the «th cyclotomic polynomial, where n = \A\ (see Section|8}. If « has at most 
2 distinct prime divisors then this gives rise to a further characterisation of the promise on 
/ in terms of certain subgroups of A. 

The paper is structured as follows. In Sections[2]and[3]we describe quantum oracles for 
group multiplication and give a definition of the quantum Fourier transform, convenient for 
our purposes. In Section|4]we define our representation-theoretic versions of constant and 
balanced functions, characterise these types of function in terms of the integral group ring, 
discuss the case where the codomain is Abelian and give examples where the codomain is 
non-Abelian. Section [5] explains how the Deutsch-Jozsa circuit is used to distinguish be- 
tween constant and balanced functions, of this kind. Section[6]lists various other algorithms 
which are special cases of our algorithm. Appendix 1, Section^ gives a brief introduction 
to group representation theory and the "Weyl trick". Appendix 2, Section [3] covers the 
number theory used in Section^ 

2. A Quantum Oracle for Group Multiplication 
The following definition generalises the notion of a qubit. 

DEFINITION 2.1. Let X be a finite set. A quX is a complex vector space spanned by { \x) \ 
xeX}. 

For example, a qubit is a qu{0, 1}. 

Suppose that G is a finite group and X is a finite set. Write Sym(X) for the group of 
permutations of X. Suppose that we are also given a function (not necessarily a homo- 
morphism) 8 : G — ► Sym(X). Define a map §: GxX^GxX by the rule (j) : (g,x) i— * 
(.8, [6(g)] (*))■ ^ §(g,x) = ty(h,y) then g = h and [9(g)] (x) = [9(g)] (y), in which case x = y, 
as 8(g) is a permutation; that is (j) is an injection, and as G x X is finite, it is a bijection. 
Now suppose that we have a quantum system C GxX = C <8> C x comprising two quantum 
registers, a quG and a quX. Then there is a unitary map U which permutes the basis states 
of this system: 

U:\g,x)»\g,[e(jg)](x)). 

In particular consider the following case. Suppose that X is a group H and / : G — ► H is a 
function (not necessarily a homomorphism). Define [9(g)]/; = f(g)h. Then 

U:\g,x)»\g,f(g)h), 

and we say that U is the H -multiplication oracle for the function / : G — > H. For example, 
suppose that G = {Zi) n and H = (X%) m . Then we recover the usual exclusive-OR oracle 

U:\x,y) h-> \x,y®f(x)). 

3. Representations and Non-Abelian Fourier Transforms 

3.1. Irreducible Representations and the Quantum Fourier Transform 

The quantum Fourier transform is an essential subroutine in nearly all the quantum 
algortithms developed to date. First we define the transform and then briefly discuss its 
implementation. Recall that every finite group G has only finitely many irreducible repre- 
sentations (see Section[7}. By application of the "Weyl trick" (Section[7}, we may convert 
any finite dimensional representation p of G into an equivalent unitary representation p', 
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and if p is irreducible then so is its unitarization p' (since it is equivalent to p). Let the 
(unitarized) irreducible representations of the finite group G be p 1 , . . . , p r (from now on we 
will omit the primes). Then these representations are used to define the quantum Fourier 
transform on G. It is well known that K=i (dimp 7 ) 2 = |G| (see e.g. |S)). Let 

R = {(ij,k) | 1 i,j ^ dimp*, UKf}. 

Then \R\ = \G\ and we may specify a (non-canonical) bijection |3 : G — » R. Writing £g 
for the identity element of G, suppose also that P(£g) = (1,1,1) and that p 1 is the trivial 
representation. (This will aid calculations later.) Note that every matrix entry pf 7 of an 
irreducible representation p^ is a function from G to C, since the matrices in the represen- 
tation vary over G. For ease of notation, write p(g) = (i g ,j s ,k g ) and then write p g for the 
function from G to C defined by 

P V)=P*;j>')foralls'eG, 

the (igjg) 01 matrix entry of the k~ irreducible representation. Also, write dim(g) for 
dim(p' : s). Then the Schur orthogonality relations (see |20|, p.251, Theorem 1. (1) and 
(2)) tell us that 

(p« , p^) = defn £ p fi > (g')pW) = ( if 81 = 82 = 8 , 

g T^ G I otherwise 

which is to say that {p A '}#eG is an orthogonal basis for L?{G), the inner product space of 
the functions / : G — > C under pointwise addition, scalar multiplication and the above inner 

dimg 



product. If we define = p s .J =^ then 



(tSI tS2\ — ) 6i SZ ( ,, 



1 if §1 =£2 
otherwise ' 

so {t g } s gg is an oTthonormal basis. Note that in particular we have 



1 

- E ° (2) 



We define the quantum Fourier transform on G (with respect to the bijection p which is 
suppressed in the notation) to be the unitary map J G : C G — ► C G defined for all g G G by 

g'GG 

The conjugate transpose of Tg is given by 



4\g)=L4(g)\g')- 

g'eG 

That is, the matrix of Jg is given by (Tg)^* 1 = t gC?') tne ma trix of is given by 
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(^G + W= T G(S)- Wehave 

^T G \g)^T^^(s)\s) 

g'eG 

= E W)?V)k"} 

g',g"GG 

= E 8^"k")(byO) 

g"eG 
= l*>- 

This further implies that 

7 G fl=l: (3) 

since if = / for any square (finite-dimensional) matrices A and B of the same size, then 
it follows that we also have BA = I. Thus f G is unitary. 

The quantum Fourier transform can be efficiently implemented in the case where G is 
a finitely generated Abelian group using the classical "Fast Fourier Transform" 1211 . HI . 
Note that by an efficient algorithm is meant one which runs in time polynomial in log(|G|). 
It is still unknown whether or not there is an efficient algorithm for the quantum Fourier 
transform over an arbitrary finite group, although such algorithms exist in many cases (HI. 
ITU . EU, ED, ED) In ED Moore, Rockmore and Russell survey and extend the 
results cited above, describing efficient algorithms for the quantum Fourier transform in 
several classes of groups including the symmetric groups S„\ wreath products Kl S„, where 
\K\ is bounded by a polynomial in «; metacyclic groups (a group G is metacyclic if it 
has a cyclic normal subgroup K such that G/K is cyclic) and metabelian (a group G is 
metabelian if it has an Abelian normal subgroup K such that G/K is Abelian). In particular 
all the groups in the examples of Section l4~2l below are covered by these classes. 

4. Generalisations of Constant and Balanced Functions 

Let X be a finite set, let H be a finite group and let / : X — > H be a function. We assume 
the notation from the previous section for representations of finite groups. When we wish 
to apply the quantum Fourier transform to the set X we regard it as the cyclic group Z„, 
where \X\ =n. 

DEFINITION 4.1. Let p k be an irreducible (unitary) representation of H. Let n = dimp* 
and suppose that i G { 1 , . . . , n}. We say that f is p^-constant if for each r £ { 1 , . . . , n} there 
exists a constant c r G C such that for all g £ X we have 1 k r (f(g)) = c r- 

If % is a linear (1 -dimensional) representation of H then we may simply refer to / 
being "%-constant". Recall that linear representations coincide with their characters and 
that the set of linear representations of H forms a group. In the case of an Abelian group 
the irreducible representations are all linear and we denote this group H (see Section [4] 
below). If H is an Abelian group and h 6 H then we adopt the practice of referring to 
"/i-balanced", meaning ^-balanced, where % is the character corresponding to h under the 
canonical isomorphism between H and its group of characters H. Note that if Xo is the 
trivial character of H then every function from X to H is %o-constant, so we normally only 
consider ^-constant functions for non-trivial characters %. 
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(a) Surjective (b) 2-valued (c) 4-valued, evenly (d) 4-valued, 

unevenly 

Figure 1: 1 -balanced functions into Zg. 

Let H = Z„ and let the set of irreducible characters of H be {%k}keH, where 

/ 2%ikx\ 
Xk{x) = exp I — — 1 , for x G H. 

Then / : X — > H is fc-constant if and only if there exists a complex number e ,e (8 <G R) such 

2ltikf(s) .„ 

that for all s G X, e~ = e . 

Example 4.2. Suppose that / is ^-constant and that, for simplicity, = 0. Then f(s) = ¥ 
for some integer r, and for all s G X. For example let n = 8. Then / is 1 -constant if and 
only if / = 0; / is 2-constant if and only if f(X) C {0,4} and / is 4-constant if and only if 
f{X) C {0,2,4,6}. To say that / is 3-constant, 5-constant or 7-constant means that / = 0. 
To say that / is 6-constant means that f(s) = y, which means that f(s) C {0,4}, for all 

sex. 

DEFINITION 4.3. Let p k be an irreducible (unitary) representation of H. Let n = dimp* 
and suppose that i G {1, . . . ,n}. We say that f :X —> H is p*-balanced if for all r G {1, ...,n} 
wehaveZgexii, r (f(8)) =«• 

As before, we can refer to / being "%-balanced" in the case where % is a linear repre- 
sentation of H. 

The trivial representation %o of H is the map sending every element of H to 1 G C. 
Therefore / can never be %o-balanced and we usually consider only %-balanced functions 
/ where % is non-trivial. 

2nikf(s) 

Again, if / : X — > Z„ then to say that / is ^-balanced is to say that Ylsex e " = 0- 

Example 4.4. Suppose that X = H = Z„, k = 1 and n = 8. One possibility is that / is 
surjective, but this is not necessarily the case. For example / could take four values of 1 
and four values of 5. In Figures [T(a)| and |]Xb")| we illustrate these possibilites, showing each 
of the eighth roots of unity labelled with the number of elements of X mapping to it under 
Xi of. Two of the other possibilities are illustrated in Figure |T(c)l where / takes values 
1,3,5 and 7 twice each, and in Figure [T(d)l where / takes the values 2 and 6 once each and 
the values 1 and 5 three times each. 

The definitions of p*-constant and balanced functions are in a form convenient for com- 
putation, as we'll see in Section |5] By contrast, the following characterisations of such 
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functions, in terms of the integral group ring of H, emphasise their structural properties. 
Let JjH denote the integral group ring of H, 7LH = ®/, 6 #Z/i. If T is a subset of H then 
define 7LT = Y.teT As usual, by an //-module we mean a Z//-module. Recall that if p 
is a representation of H of dimension n then H acts on the right on C" by 

v-h = vpQi), for v G C" and h G H, 

where we regard v as a row- vector of length n and p(h) as an n x n matrix over C. This 
action of H extends by linearity to an action of ZH on C"; which is in this way a right 
//-module. For v € C define the annihilator of (v) (with respect to p) to be 

Ann(v) = {r€ZH :vr = Q}. 

Then Ann(v) is a right ideal of ZH. We also define the stabiliser, in H, of an element 

v G C" to be 

Stab#(v) ={h€H : vh = v}. 

Since H is finite we may assume that// = \h\,... ,hd}, where d = \H\. Given / : X — ► H 
define rrij = \f~ l (hj)\, j = l,...,d; so mj ^ and Y?j=\ m j = We call an element 
r = Y?j=\ a jhj °f admissible if aj ^ and Y?j=\ a j = 1^1- 
Definition 4.5. Given f :X H the element 

d 

r f = E m J h J G ZH 

is called the element ofTLH associated to f. 

We denote the /th standard basis element, the row-vector which is zero everywhere 
except the /th coordinate which is 1, by e,. Given an irreducible representation p of H we 
define 

/ dim(p) ^ 

This is consistent with the definitions of Section lTTI since. using the notation of that section, 
we have %i h j h = 'i l H . The first statement of the following Theorem is due to S. Linton. 

THEOREM 4.6. Let f : X — > H be a map, let p be an irreducible representation of H, let 
rf be the element ofTM associated to f and let S = Stabn(ei). Then 

(i) f is Pi-constant if and only if rf € IT , where T is a coset T = Sh of S in H, with 
h G Im(/), and 

( ii) f is Pi-balanced if and only if rf G Ann(ej). 

Proof. By definition / is p,-constant if and only if there exists c = (ci,...,c r ) G C" such 
that 

(T i , 1 (f(g)) > ...,X i , n (f(g))=c, 

for all g £ X. The left hand side of the equality above is e,T(/(g)), so / is p,-constant if 
and only if 

erf(g) = eip(f(g))=c', 

where c' = ^|dim(p)|/|//|c, for all g G X. Choose h G Im(/); so e; • h = c'. If /?' G H then 
e,- • h' = d = ej ■ h if and only if h' = sh, for some s G S. Thus {h' G H : e, -/?' = c'} = T, where 
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T = Sh. It follows that / is p,-constant if and only if Im(/) G T; if and only if /y S Z7\ As 
/; is an arbitrary element of Im(/) the first statement of the theorem now follows. 
The function / is p,-balanced if and only if 

o=£v(/(s)) = E%v(fc;). 

gex 7=1 
for r = 1 , . . . , n. That is, if and only if 

d d 

= E m j( X iA ( h j)>- ■ ■ >tiA h j)) = e i E m M h j)- 
;=1 7=1 

Since x and p differ only by a constant this holds if and only if 

d d 

= e; E m jP( h j) = e '" E m A> 
;=i 7=1 

that is if and only if ry £ Ann(e,), as required. □ 

As is clear from the proof above / is p,-constant if and only if Im(/) C T, where T is 
an appropriate coset of Stable,). Thus we may characterise p,-constant functions without 
reference to the group ring. However there does not appear to be such a simple character- 
isation of p,-balanced functions, for which we need to pass to the group ring. To compare 
the two we then need to recast the characterisation of p,-constant in similar terms. 

Note that if X = {x\,. . . ,x„} then, classically, we may compute f(xA, for j = l,... ,n/2, 
and find that e, ■ f(xj) = c, for all such j. If f{xj+\) is such that e; • f(xj + i) = c then / is p,- 
constant. However, if <?,■ • f(xj) = — c, for j = n/2 + 1, . . . ,«, then / is p,-balanced. Hence 
we can distinguish, with certainty, between p,-constant and p,-balanced functions, using 
classical computation, only after making n/2 + 1 calls to the oracle for /. Therefore a clas- 
sical algorithm cannot solve this prolem in polynomial time. In Section[5]we show that for 
the same purpose a quantum algorithm requires only one call to the quantum oracle for /. 
Thus, as in the case of the standard Deutsch-Jozsa algorithm, quantum computation gives 
an improvement in speed which seems impressive. However, as the number of admissible 
elements of Stable,-) is much smaller, in general, than the number of admissible elements 
in Ann(e,), using a classical algorithm we can quickly distinguish between a p,-constant 
and p,-balanced functions, to within a bounded probability of error. To be more exact: in 
Section [6]below we observe that the original Deutsch-Jozsa algorithm may be viewed as 
a special case of our algorithm. In this case we can use a classical algorithm to determine 
whether / is p,-constant or p,-balanced, with probability of error less than 1 /2, in two 
calls to the oracle evaluating / (see for example 117)): so the problem lies in the complex- 
ity class BPP. Hence in general if we accept bounded error computation then our quantum 
algorithm only gives a constant-factor improvement over a classical algorithm. However it 
should be emphasised the quantum algorithm gives and exact answer, so the more general 
problems described here lie in complexity class EQP. 

4. 1 . Finite Abelian Groups 

In Section[3]we made use of a bijection p : G — > R, where R is a set which indexes all 
the matrix entries of the unitarized irreducible representations of G. In the general case 
there is no canonical choice of p. In some cases, however it is clear which bijection to 
choose, and this lends extra structure to the Fourier transform. One such case is that of an 
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Abelian group A, where every irreducible representation is one-dimensional. In this case 
the irreducible representations coincide with the characters of A and form a group, denoted 
A, of the same order as A. Suppose that A = Z„ is a cyclic group, under addition mod n 
and let the characters of A be p*, where p k (a) = e 2xmk / n , k = 0, . . . ,n. Then A: i — ^ is an 
isomorphism between A and A. 

This generalises to the case where A is an arbitrary finite Abelian group, say A = 
©y =1 Z flj , of order n = Yl n j> as follows. Let m = (mi , . . . ,m^) G A and let p 7,! be the ith 
character of Z nj , as above. Then the map m = (mi ,.. . ,mk) \— > 11)= 1 p J<mj = p™ is an iso- 
morphism between A and A . So, for fixed m and all a = (a\ , . . . , a^j £ A, we have 



(4) 

V" \ pi "j J 

Now set kj = n /nj, for j - 

(j)„, : A — > Z„ by (j) m (a) = I V ajmjkj J mod n. 

V=i / 

Then (j)„, is a well-defined map from A to Z„ (which is a homomorphism but not, in general, 
an isomorphism). Define f m = (j)„, o /, a map from X to Z„. From 
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Therefore t- o f m = X™ o / and we have the following lemma. 

LEMMA 4.7. /« ?/ze notation above, f is m-constant if and only if f m is l-constant and f 
is m-balanced if and only if f n is l-balanced. 

In the light of this lemma, if the codomain of / is Abelian we may always assume that it is 
cyclic. 

We shall now analyse more carefully the condition that / : X — > H is ^-constant or k- 
balanced when H is the finite cyclic group Z„ and ^ k < n. Let d = gcd(A:, n), and suppose 
that k = ud, n = vd. Let (v) be the subgroup of Z„ generated by v. Then Z v = Z„/(v), and 
there is a canonical homomorphism K : Z„ — > Z v . Let / = K o f, so f(a) — f(a) mod v, for 
a g Z„. 

PROPOSITION 4.8. /n the notation above the following are equivalent. 

( i) f is k-constant. 

( ii) f is u-constant. 
(Hi) f is constant. 



Proof. As observed following Definition 14. II / is A:-constant if and only if there exists a 
constant Bel such that c 27cft/(s)/» = e 2we/« ; for all s £ x This is so if and only if = 
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mod «; if and only if uf(s) = (Q/d) mod v. As f(s) = f (s) mod v, this shows that (Q and 
lE) are equivalent. Now / is M-constant if and only if u f(s) = 8 mod v, for some 0, if and 
only if f(s) = m~'0 mod v, as u and v are coprime. Thus lEJ and dull are equivalent. □ 

COROLLARY 4.9. / is k-constant if and only if f(X) is contained within some coset of (v). 



Proof, f is fc-constant if and only if / is constant, from Proposition ^. Sliiit . and the result 
follows. □ 

COROLLARY 4.10. If p is a prime number, then for all k £ {l,...,p— 1}, a function 
f : Z p — * 7L p is k-constant if and only if it is constant. 

Proof. This follows directly from the equivalence of Proposition ^. 8lii> and (ujj . □ 

PROPOSITION 4. 1 1 . In the notation above the following are equivalent. 

(i) f is k-balanced 

( ii) f is u-balanced. 
(Hi) f is l-balanced. 

Proof. (0 and (|i]} are equivalent because 

£ e 2%ikf(s)/n = e 2niuf(s)/v = ^ ^niuf^/v _ 
sex sex sex 

To see the equivalence of (E) and dTTTi note that, because gcd(M, v) = 1, 
{0,...,v-1}= Zb {0,m,2 M ,...,(v-1) M }, 

i.e. 0,u, ...,(v— 1)m is a complete set of residues for Z v . Therefore Y.sex e 2m "^ s ^ v = 
Lsexe 2llif{s)/V - □ 

Given « and k as above, replacing the function / : X — > Z„ with the function / : X — > Z v , 
it follows from Propositions l4.8l and l4. 1 II that we reduce the problem of distinguishing be- 
tween ^-constant and ^-balanced to that of distinguishing between constant and l-balanced. 
Therefore we now restrict to functions / : X — > Z„ which are either constant or l-balanced. 

Corollary 14. 91 gives a characterisation of ^-constant functions in terms of the subgroup 
(v) of Z„ but, despite the similarities between Propositions 14.81 and 14.111 we have no 
analagous characterisation of A:-balanced functions. In order to find such a characterisa- 
tion it is convenient to recast Definition ^. 5l in terms of polynomials over Z, since in this 
special case we obtain a polynomial of one variable. As before, given / : X — > Z„ we may 
define the integer p, = (t )|, for t = 0, . . . ,n — 1, and now define the polynomial 

n-l 

Pf(x)= 1 £PtX t - 

t=0 

(Regarding x as the generator of Z„ we may identify Pf with the element rj of the integral 
group ring of Z„.) Observe that 

(a) the degree of Pf is at most n— 1, 

(b) all the coefficients p, of are non-negative, and 

(c) K=oPt = \ x \- 
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Let co = e 2 "'/", then / is 1 -balanced if and only if 

0=^co^ ) ='x; 1 p,co'=P / (w). 

seX r=0 

The minumum polynomial of co over Q is <t>„, the nth cyclotomic polynomial (see Section 
|8]for further details). Therefore / is 1-balanced if and only if & n \Pf- On the other hand / 
is constant if and only if Pf is a monomial (i.e. has the form p t x* , for some t). Conversely, 
given a polynomial P satisfying (|E) and Q we may define a function / : X — > Z„, by 
choosing a partition of X into (at most) n subsets Xq, . . . ,X„_i, such that Xj has size pj, and 
defining f(g) = t, if and only if g £ X t . Then / is constant if and only if P is monomial 
and is 1-balanced if and only if P is divisible by <t>„. If we regard the oracle for / as 
an oracle which determines the polynomial Pf then the promise that / is constant or 1- 
balanced is equivalent to the promise that Pf is monomial of divisible by <S>„. The problem 
of distinguishing between constant or 1-balanced functions is therefore equivalent to the 
problem of distinguishing between (hidden) polynomials which are either monomial or 
divisible by <t>„. 

Example 4.12. Consider the functions / : Z„ — * Z„ of Example 14.41 as illustrated in 
Figure [J For the function / of Figure [T(a)] Pf = 1 +x + x 2 +x 3 + x 4 +x 5 +x 7 +x s . For 
/ in Figures [T(b)l [T(c l and [T(d)l we have P f = 4x(l + x 4 ), P f = 2x(l +x 2 +x 4 +x 6 ) and 
Pf = x(3 +x + 3x 4 + respectively. 

We are now in a position to apply Theorem l8.3l of Section|8] and the following definition 
to characterise 1-balanced functions into Z„ for sufficiently simple n. 

DEFINITION 4.13. LetX and Y be sets, S a subset of Y and f : X — > Y a function from X to 
Y. Then S is evenly covered by f if there exists m £ Z such that \f~ 1 (s) | = m, for all s E S. 

In keeping with the terminology of 1121 . if Y is evenly covered by / we shall say that / 
is perfectly balanced. 

THEOREM 4.14. Let n be a positive integer and let p and q be distinct primes such that 
n = p a q$, where a and P are integers, a > and (3^0. Let X be a finite set and f : X — > Z„ 
a function. Define K p to be the subgroup of7L n generated byn/p and, if p > 0, define Kg to 
be the subgroup generated by n/q. 

(i) Iff) = then f is 1-balanced if and only if every coset ofK p is evenly covered by f. 

(ii) Iff > then f is l-balanced if and only if there exists a partition ofX into disjoint 
subsets X p and X q such that every coset of K p is evenly covered by f\x„ and every 
coset of Kg is evenly covered by f\x q . 

REMARK 4.15. The obvious generalisation of this theorem to integers with 3 or more 
prime factors does not hold, as shown by Example l4. 19l below. The best we have been able 
to do is Proposition ^. 161 

Proof. From the discussion above the function / is 1-balanced if and only if Pf is divisible 
by <t>„. Consider first the case p = 0. From Theorem l8.3l we have Pf{x) = s(x)^ p (x n ^ p ), 
where s E Z[x] and the coefficients of s are all non-negative. As deg(P^) ^ n — 1 and 

deg(<t> p ) =p — lit follows that deg(s) ^.n/p — 1. Let s(x) = uq + u\(x)-\ \-u n f p _ l x'^ p ^ 1 . 

Fix t e Z with ^/ < n— 1. Since <& p (x) =l+x-\ \-xP~ 1 the coefficient p, of x' in 
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Pf is uj, where j is the unique integer such that j = t mod n/p and ^ j < n/p. There- 
fore the coefficient p t equals the coefficient p r , for all r such that r = t mo&n/p. Thus, 
if < t < n/p, we have p t = p r , for r = t,n/p + t,...,(p— \)n/p + t. As p t = \f~ l (t)\ 
it follows that the coset t +K p is evenly covered by /. The converse follows easily, by 
reversing this argument. 

Now suppose that (3 > 0. This time Theorem 18.31 implies that / is 1 -balanced if and 
only if Pf(x) = s\(x)<& p {x n l p ) + S2{x)Q q (x"l q ), where Sj G Z[x] and the coefficients of s; 
are all non-negative. Let A(x) = si (x)<f> p (x"' p ) and B(x) = S2{x)Q q {x n l q ), and suppose that 

A(x) = ao + flixH hfl„-ifl" _1 andB(x) = bo + b\x-\ \-b n ~ix" . As in the case P = 

the coefficients a r and a t are equal for all r,t such that ^ r,t < n and r = t mod n/p. A 
similar statement, involving q instead of p, holds for the coefficients of B. For fixed t we 
have \f~ l (t)\ = ai + bj, where ;= t modn//?and j = t mod n/q. Hence we may partition 
/ _1 (t ) into disjoint (possibly empty) subsets X pf andX 9 , ; such that \X Pl t\ = a/ andX qJ = bj. 
Now t = r mod n/p implies a,- = a t so also \X p . t \ = \X p . r \. Setting X p = U^~qX p ^ we see 
that f\x p covers t +K P evenly, for t = 0, . . . ,p — 1. Similarly, if X q = U"~ X qit then f\x 
covers t + K q evenly, for t =0,...,q— 1. AsX =X p UX q and X p n X q = 0, this completes 
the proof of the theorem. □ 

PROPOSITION 4.16. Let n be a positive integer with prime factorisation • ■ • p"* . Let 
K Pj be the subgroup ofZ„ generated by n/pi. Let f : X — > Z„ be a function with associated 
polynomial Pf such that 

P f (x) = -£ Si (x)^ Pi (x"/P% 
1=1 

where Si G Z[x] and the coefficients of are all non-negative. Then f is l-balanced and 
there exists a partition ofX into disjoint subsets X\,. . . such that f\x t evenly covers the 
cosets ofK Pi , i = 1, . . . ,k. Moreover, setting Ni equal to the sum of the coefficients of Si we 
have \Xf\ = nNi/pu 

The proof of Proposition ^. 16l is similar to (the appropriate part of) the proof of Theorem 
I4.14l and we leave the details to the reader. 

Example 4. 17. Consider the polynomials of Example l4. 12l corresponding to the functions 
of Example 14.41 and Figure [2 Here K p = K% = (4) = {1,4}. For Figure [T(a)l we have 
Pf = 1 +x+x 2 +x 3 +x 4 +x 5 +x 7 +x 8 = (1 +x+x 2 +x i )<t>2{x 4 )- In this case every coset of 
K2 is covered evenly by one element of X. Corresponding to Figure [T(b)l Pf = 4x(l +x 4 ) = 
4x<t>2(^ 4 ). Here 1 +K2 is evenly covered by 4 elements and all other cosets are covered by 
elements. Figure [T(c)| gives Pf = 2x(l +x 2 +x 4 +x 6 ) = 2x(l +x)<i>2(x 4 ). This time Ki 
and 3+K2 are covered by elements and 1+^2 and 2 +K2 by 2 elements. With Figure 
I l(d)| we have Pf = x(3 + x + 3x 4 +x 5 ) = x(3 +x)<t>2(x 4 ); the coset 1 +K2 is covered by 3 
elements, the coset 2 + K2 is covered by 1 element and both other cosets by elements. 

Example 4.18. Let n = 15 and / be a function Z45 — > Z15. In this case ^3 = (5) and 
K 5 = (3). Iff/ = (4 + 2x+x 2 + 3jc 4 )4> 3 (x 5 ) + (2+x 2 )<I>5(x 3 ) then /is l-balanced. We can 
partition X into subsets of size 30 and X5 of size 15 such that f\x 3 covers ^3 evenly 
with 4 elements, 1 +^3 with 2 elements, 2 +^3 with 1 element 3+^3 with elements and 
4 + ^3 with 3 elements. Similaraly f\x f covers cosets t + K$, for t = 0, 1,2, evenly with 2, 
and 1 elements, respectively. 
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Example 4.19. We are grateful to C. Smyth for pointing this example out to us. Let n = 
105, co = exp27t;/105, C, = CO 7 andr| = CO 15 , so £ 15 =T| 7 = 1. The minimum polynomial of C, 
over Q is $15 (jc) = 1 -x+x 3 -x 4 +x 5 -x 7 +x s , so we have 1 + £ 3 + £ 5 + £ 8 = £ + £ 4 + £ 7 . 
The minimum polynomial of r| is <Pj(x) so we have 1 +r| +r| 2 H h r) 6 = 0. Therefore 

(C + + C 7 )(ri +ri 2 +ri 3 +ri 4 + -n 5 +-n 6 ) + (1 + C 3 + C 5 + C 8 ) = 0. 

Writing this out as a polynomial in co we obtain P = £r=o Pt®' = 0, where p t = 1, for f = 0, 
4, 13, 19, 21, 22, 34, 35, 37, 43, 52, 56, 58, 64, 67, 73, 79, 82, 88, 94, 97 and 103, and 
p t =0 otherwise. Let / be a function Z105 — > Z,iqs such that P/ = P. Then / is 1-balanced, 
as P(co) = 0. Any straightforward analogue of Theorem 14. 141 would (at the least) assert 
that there is a subset S of Z105 and a subgroup K of Z105, such that the restriction of / to 
S covers every coset of K evenly. Since po = 1, this would imply that f\s covers K evenly. 
Thus / should map one element of Z105 to each element of K. Hence p, should be equal to 
1 for t equal to some divisor of 105 and all its multiples. This is clearly not the case so no 
such generalisation of Theorem l4. 14l exists. 

COROLLARY 4.20. If p is a prime number then a function f :1ip — ► Z p is l-balanced if 
and only if it is a bisection. 

4.2. Non-Abelian Examples. 

The following examples involve the symmetric groups S„ and the alternating group 
A4. It follows from the results of 1161 (see the end of Section that there are efficient 
implementations of the quantum Fourier transform for these groups. Therefore efficient 
quantum algorithms for the problems of these examples may be constructed. 

Example 4.21. Consider the simplest possible non-Abelian finite group, S3, considered 
as a dihedral group and generated by a rotation r and a reflection s. The irreducible rep- 
resentations of S3 are p 1 , the trivial representation, p 2 , the alternating representation, and 
p 3 , the two-dimensional representation. The corresponding Fourier coefficients are given 
in the following table. 





1 


r 


r 2 


s 


t = r 2 s 


u = rs 


T 1 

1,1 


1/V6 


1/V6 


1/V6 


1/V6 


1/V6 


1/V6 


T 2 

1,1 


1/V6 


i/Ve 


1/V6 


-1/V6 


-1/V6 


-1/V6 


T 3 
1,1 


1/V3 


e 2 ™/ 3 /V3 


e -27ti/3/^ 











T 3 











1/V3 




e 2 ™/l/V3 


T 3 













e 2 ™/yvi 


e - 2 ™/yv3 


T 3 
L 2,2 


1/V3 


e -2m73/^3 


e 2lc '/ 3 /V3 












1 . First consider the alternating representation p", which is linear. To say that a function 
/ : X — *• 53 is p 2 -constant means that the image of / is contained in (r) or its coset 
(r)s. To say that / is p"-balanced means that ((r)) | = ((r)s)\. 

2. Now consider the 2-dimensional representation p 3 . To say that / : X — > 53 is p 3 - 
constant means that for i = 1 and 2 there is a constant c,- £ C such that for all g GX, 
X 3 jifig)) = Cj. For / = 1 or 2, the table above shows that / has to be constant. Since 
one coset of (r) always maps to zero under a matrix coefficient of p 3 , the meaning 
of p 3 -balanced is that 

£ =0 and £ Xi, 2 (/fe))=0. 

gef- 1 ((>■)) gef- l ((r)s) 



12 



Extending the Deutsch-Jozsa-H0yer Algorithm 
In other words, setting mj = \f~ (r^)\ and nj = \f~ l (r^s)\, j = 0, 1,2, 

2 2 

£ mje 2 *'^ 3 = and ^ «>e 2,t,7/3 = 0. 

7=0 ' 7=0 

Setting P(x) = Y^j=o m j x ^ an d Q{x) = T^j=Q n j x ^ it follows that / is Pj-balanced if 
and only if 4> 3 |Pand4>3|g- LetXi = /" ((r)) andX 2 = f~ 1 ({r)s; so X is the disjoint 
union of X\ and X<i, and set = f\x r Then, as in Section l4~Tl it follows that / is Pj- 
balanced if and only if (r) is evenly covered by f\ and (r)s is evenly covered by 

h- 

In this case (in the terminology of Theorem 14. 6> Ann(ei) = Ann(e2) the ideal of 
JjSi generated by the element 1 + r + r 2 . Hence / is -balanced if and only if it is 
p^-balanced. 

Example 4.22. Let S,„ be the symmetric group on m objects and let A m denote its alter- 
nating subgroup of index 2. Let % be the alternating character of S m : that is % is the linear 
character of S m given by %(h) = 1 if h £ A,„ and %(h) = — 1 otherwise. Let / : X — * S m be a 
function and assume that we axe promised that either (a) im(^) cz A m or im(^) (Z S m — A m 
or (b) \ f~ l (A m ) \ = \f~ l (S m —A m )\. Then / is x-constant in case (a) and %-balanced in case 

(b). 

Example 4.23. The alternating group A\ may be regarded as the orientation-preserving 
group of symmetries of a regular tetrahedron, whose 1 -skeleton is embedded in M? as 
diagonals of faces of a cube with vertices (± 1 , ± 1 , ± 1 ) . This gives rise to a 3-dimensional 
unitary irreducible representation p of A4 generated by matrices 







1 


> 




H 










andfl = 




V 1 





j 





-1 \ 
0-10 

01/ 



The elements of A4 may then be listed as 

I,N,N 2 ,R,RN, RN 2 , NR,NRN,NRN 2 , N 2 R,N 2 RN,N 2 RN 2 . 

Then Stab^ (e \ ) = {I,N 2 RN} . Therefore a function / : X — > A4 is p 1 -constant if and only 
if f{X) is contained in one of the cosets 

{/, N 2 RN} , {N 7 N 2 RN 2 },{/V 2 , N 2 R} 7 {R,NRN 2 } , {RN,NR} 7 {RN 2 , NRN} . 

Calculation of e\M, for each M £ A4 in turn shows that Ann(ei) is the subset of IA4 
consisting of elements Y.MeA 4 m mM sucn that 

m I -m R + m N 2 RN - m NRN i = 0, 
m N - m RN + m N 2 RN 2 — m NR = and 
m N i - m RN 2 + m N 2 R - m NRN = 0. 

Therefore / is is pi-balanced if and only if ry has such a form. We may also characterise 
p,-constant and p,-balanced functions in this way, for i = 2,3 and the results are very 
similar. 

5. The Deutsch-Jozsa-H0yer Algorithm with Generalised Promises 

In this section we assume that we have a finite set X and a finite group H and a map 
/ : X — > H, and we work with an oracle Uf as in Section |2] We use the notation of Sec- 
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tion 13.11 for representations of the group H. In particular let H have irreducible unitary 
representations p 1 , . . . , p R so we have 

, /dimp* , 
\] y | H | P»,y. 

for 1 ^ A: ^ /? and 1 ^ z, j ^ dimp^. Then, since {%h}heH is an orthonormal basis of L 2 (H), 
we have 

i[,.r;., (5) 

LEMMA 5.1. Lef X fee a finite set and H be a finite group and f :X H be a map. Then, 
for fixed i,j,k,r,s,t, we have 

E ijm tS (f(g)h) =^cte))5jAf 

Proof. Let « = dimp f . Using the formula for matrix multiplication, 

heH heH q=l 

q=l heH 
9=1 

= E^(/te))8,-AA,r (by 0) 

9=1 

= T ^(/(g)) 8 /..v § A-.r as required. 

□ 

We shall use the circuit in Figure which was introduced in 1121 . where it was used 
to distinguish between perfectly balanced and constant functions. In order to apply the 
quantum Fourier transform to the X register we assume that X = Z„, where « = By 
Ex we mean the element of X which corresponds to lz„. Our main result is Theorem l5.2l 
where it is shown that the range of promises that the algorithm can deal with extends 
beyond perfectly balanced and constant. 

If we omit the f H and gates in Figure|2]and ho is set to be the identity, then we obtain 
the non-Abelian analogue of the circuit used in Shor's algorithm. This has been proposed 
as a quantum algorithm for the hidden subgroup problem. We note, however, that it has 
been shown in II 101 that while a polynomial number of Fourier samples will reconstruct a 
normal hidden subgroup, the circuit fails to solve the hidden subgroup problem in S„ for 
general subgroups, even in a very restricted situation (see also |9j. where the latter of these 
results was obtained independently). 

When working with query complexity, only the number of calls to the oracle is relevant, 
and we do not discuss here the efficient implementation of the Fourier transform on a finite 
group any further here (but see the end of Section|3j. 

Theorem 5.2 (General Form of the Deutsch-Jozsa-Hoyer Algorithm). Let 
f : X — > H be a function from the finite setX to the finite group G and let p k be a non-trivial 
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|e*>- 
l*o> " 













-f> 






Uf 
















f H 


— l*o) 



qutf 



Figure 2: The quantum circuit for the Deutsch-Jozsa-H0yer algorithm. 



irreducible representation of H. Let n = dimp^. Suppose that we are promised that for 
some i G {1, . . . ,n}, / is either p* -constant or ^[-balanced. Then there exists a quantum 
algorithm which distinguishes between these two possibilities with certainty, using a single 
quantum query. 

Proof Let j 6 {1, . . . ,«} and let Iiq correspond to the triple (i,j,k) under the bijection 
described in Section IXT1 (Note that ho is necessarily a non-trivial element of H.) We 
assume that we have gates J x and f H at our disposal to perform the quantum Fourier 
transforms on X = Z„ and H. We use the quantum circuit in Figure [2] This operates as 
follows. 



\zxM) 



E T%(g)T%(h)\g,h) 

gex.heH 

E T%(h)\g,h), using©, 



gex.heH 



1 



E <°(h)\gJ(g)h) 



gex.heH 



I T h H °(h)4(g)4(f(8)h)\g\h>). 

g.g'ex,h,h'eH 

Given that 9 is a bijection from H to R, with 8(/jo) = {i,j,k) we may sum over triples 
(r, s,t) € R instead of h! £ H. The expression above then becomes 



g,g'eX,heH,r,s,t 

Applying Lemma l5~Tl this is equal to 
1 



E <j(h)4(gK(f(g)h)\g',h' 



\X I g.g'eX.r.s.t 

1 



E 4(gWi(m)hsht\g'^t)) 



E 4(gK ;i (f(sW,( r JM- 

g,g'eX,r=\.....n 

Restricting to g' = Zx on the right hand side of equation we obtain 



X 



(6) 



(7) 



geX.r=l n 
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If / is p-'-balanced then we have Y^geX^iifis)) = 0, for r = 1, . . . ,n; so Q is equal to 0. 
Thus measurement of the first register never results in |ey). On the other hand, if / is p*- 
constant then there exists a non-zero complex constant c r such that we have xf r (f(g)) = c r , 
for all g EX, for r = 1, . . . ,n. In this case the right hand side of equation © becomes 

m 

Y^c;\ex,(r,j,k)) 

r=\ 

and measurement of the first register always results in \Zx). □ 

6. Conclusion 

From Theorem l5.2l it follows that we can distinguish in a single step, with certainty, be- 
tween p^-constant and p*-balanced functions in all the examples of Section|4] In particular, 
for an Abelian group A this means we may distinguish between ^-constant and ^-balanced 
functions, for all k G A, as described in Section 14.11 In the case of non- Abelian groups, 
as shown in Section l4~2l there are many functions which may fall into the category of pf- 
constant or p* -balanced for an appropriate choice of representation p. Here we summarise 
various known algorithms which are also covered by Theorem l5.2l 

1 . The Deutsch-Jozsa-H0yer Algorithm: 

Suppose that X and H are finite groups with H nontrivial such that \X \ = m\H\ and 
assume that / is constant or ra-to-one (the second possibility is called perfectly bal- 
anced in Q2j). If / is constant then it is ^-constant for any linear character % of H. 
Suppose that / is m-to-one and % is a nontrivial linear character of H. Let %o be the 
trivial character of H. Then we have 

Ix(/fe'))=»IxW 

g'ex h'eH 
= m(x,Xo) 
= 0, 

by orthogonality of irreducible characters, since % is non-trivial. So / is ^-balanced. 
Thus we recover Hoyer's result from | '12 1 that we can distinguish between perfectly 
balanced and constant functions from X to H with certainty in a single quantum 
query. 

2. The Deutsch- Jozsa-Constantini-S me raldi Algorithm: 

In the case where X = 1 mn and H = Z„ we recover the result of |33, which is itself a 
subcase of Hoyer's result^ 

3. The Deutsch Algorithm: 

In the case where X = 7Li and H = Z? we obtain Deutsch's algorithm |5|. 

4. Limited Surjectivity Testing: 

Suppose that / : Z p — * Z p where p is prime. If we are promised that / is either 
constant or surjective then we can decide which is the case in a single quantum query, 
by Corollaries l4. 10l and l4.20l Classically, we would clearly require two queries. (This 
is also a special case of the Constantini-Smeraldi result above.) 

5. The Deutsch- Jozsa algorithm: 
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In the case where X = and H = Z2 we obtain the Deutsch-Jozsa algorithm ]6), 
in the form it appears in in 0. 

These examples cover the main instances of the Deutsch-Jozsa-H0yer algorithm, of 
which we are aware, and in which the circuit is used to give an exact result. Moreover 
the examples of Section |4] cover much wider classes of functions than those covered by 
the examples described in this section. It therefore seems that Theorem 15.21 is a genuine 
generalisation of the algorithms existing in the literature. 

7. Appendix 1 

In this section we provide a short summary of the standard properties of representa- 
tions of finite groups. Proofs may be found in any introductory text book on representation 
theory, for example [ 14 1 or 1 8 1 . 

A representation of a group G is a homomorphism p : G — > GL(«,C) for some n £ N. 
Given a basis B of C and an element gGGwe denote by Psig) the matrix of the linear 
transformation p(g) with respect to the basis B. (If B is understood we use p(g) for both 
the linear transformation and its matrix.) Suppose that p' is another representation of G and 
there exists a matrix T £ GL(«,C) such that p = T^^p'T. Then these representations are 
not equal because they are different homomorphisms. However, there exists a basis B' of 
C" (T is the change of basis matrix from B to B') such that for all g £ G, p' B i(g) = Pb(s)- 
In this case we say that p and p' are equivalent representations. 

If there is a proper subspace V of C which is invariant under the action of p(g) for all 
g £ G (i.e. for all g £ G we have [p(g)] (V) = V) then p is equivalent to a direct sum pi © P2 
of smaller dimensional representations pi and P2. If there is no such subspace then we say 
that p is irreducible. 

A group G always has the one-dimensional representation p 1 : G — > C given by p 1 (g) = 
1 for all g £ G. This is called the trivial representation of G and is clearly irreducible. Let 
CG be the vector space spanned by the elements of G. In the case where G is finite, this 
is of course finite-dimensional. G acts on itself by left (or right) multiplication and this 
action extends to a linear map of CG to itself by permuting the vectors in its G-basis. This 
is known as the left (or right) regular representation of G. The regular representation is not 
irreducible unless G is trivial (see |14 1 Section 2.2). Furthermore, the regular representation 
of a finite group G decomposes as a direct sum of all of the (inequivalent) irreducible 
representations p of G, each one appearing dim(p) times in the decomposition. It follows 
that (a) there are only finitely many irreducible representations of G and (b) the sum of the 
squares of the dimensions of the irreducible representations is equal to |G|. 

If p is a representation of G such that for all g £ G, p(g) is a unitary map, then p is called 
a unitary representation of G. If G is a finite group then a technique known as "Weyl's uni- 
tary trick" can be used to unitarize any irreducible representation (i.e. find an equivalent 
representation which is unitary.) That we can do this is important for the definition of the 
Fourier transform on G so we recall its proof from |20j. Let p be an irreducible represen- 
tation of G with n = dimp and let (■, •) denote the standard inner product on C". First, we 
form an inner product (■, -)i nv on C which is invariant under p(g) for all g £ G. This is 
done simply by defining 

(«,v)inv= £(pO)w,P(»v). 

We show that, since the latter inner product is invariant under p(g) for all g £ G, p is 
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conjugate to a unitary representation. Suppose that {ei}" =l is the standard basis of C". Let 
C = {cjj} be the matrix given by qj = (e*, e/)iny Then C is positive definite and Hermitian 
(C* = C). Thus, by the spectral theorem for Hermitian matrices, C = U*DU where U is 
unitary and D is diagonal with positive real entries. Thus we can define \[D to be the 
matrix with entries the square roots of the diagonal entries of D. Let R = U*\fDU . Then 
C = R 2 and since the inner product which gave rise to C is invariant under p we have 
p(g)C[p(g)]* = C for all g G G. Let pu(g) = R~ 1 p(g)R. We claim that pu is a unitary 
representation. This follows because for all g £ G we have 

Pu(g)lPu(gW=R- l p(g)RR*lp(8)r(R- l T 

= R~ l p(g)R 2 [p(g)]*(R~ 1 )* , since/? is also Hermitian 
= R- l p(g)C[p(g)}*(R- l r 
= R- l C{R~ 1 )* 
= R- l RR*(R*y l 
= 1 

and similarly, for all g in G, [pu{g)]*Pu(g) = !• 

8. Appendix 2 

Here we recall the definition and some of the basic properties of cyclotomic polynomi- 
als and establish the identity that we require in Section [4] Let « be a positive integer, let 
co = exp(2ra'/n) and let R = {d : d G Z, 1 ^ d < n,gcd(d,n) = 1} . The nth cyclotomic 
polynomial is defined to be 

=n(*-<A 

deR 

It follows from the definition that the degree of 4>„ is (j)(«), where (]) is Euler's totient 
function. As shown in, for example, 1131 p. 194] 

*"-i=n*«*(*)> 

d\n 

from which it follows that <&„ G Z[x). Moreover (see 1 13 1 <t>„ is irreducible in Z[x] and so is 
the minimum polynomial of w over Q. The following identity is standard; we cast it in the 
particular form we require below. Let n = p^s, where p is prime, y ^ 1 and p \ s. We have 

x" - I =H<P d (x) 

d\n 

d\s d\n/p 

As x" - 1 = {x"Ip - l)4>p(x"/P) it follows that 

%{^ lp ) = Y[^ P u{x). (8) 

d\s 

We shall also require the following fact. 
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LEMMA 8.1. Let a\, . . . ,a„be non-negative integers, n 2, and let d — gcd(ai +1, . . . ,a n + 
1). Then there exist polynomials s;(x) G Z[x], i = 1, . . . ,n, smc/i f/iaf 

+-*+ i-* ') = 1 +*h h^ -1 . 

Proof. First consider the case n = 2. Note that if a\ = «2 then d = a\ + \ and \i = 1, S2 = 
have the required property. Use induction on ay + «2, starting with the case a\ = «2 = 0. 
In this case the result follows from the previous remark. Now suppose that ai + 02 > 0. It 

may be assumed that a\ < 02. Set / = 1 + xH \-x° l , g= 1 + xH hx" 2 , f = — x" 2 ~ ai 

and ft = 1 +x H h x" 2 "" 1 _ 1 = t f + g. 

Then gcd(«i + 1, {a% — a\ — 1) + 1) = gcd(ai + l,a2 + 1 — (ai + 1)) = gcd(«i +1,02 + 
1 ) = d, so by induction there exist s\ , s' 2 such that s + s' 2 h = 1 + x H h jcr 1 . Hence 

l+*+--+J( rf -Wi/ + a'2(ff + *) 

as required. Thus the result holds when n = 2. 

Now suppose that n > 2. Let d\ = gcd(«i + 1, . . . ,a n -\ + 1) and dj. = gcd(a„_i + l,a„ + 
I). From the inductive hypothesis there exist u\ , . . . , u„-\, v\ , V2 £ Z[x] such that 

n-l 

£ itj(x)(l +jc+ • • • + x"<) = 1 +jc+ • ■ ■+x d '- 1 (9) 
1 

and 

vi(x)(l+x + ---+x"»-')+V2(x)(l+x+---+x c '") = l+x+---+x ch -- 1 . (10) 
As c/ = gcd(c/i,ii2) there are u, v <G Z[x] such that 

m(x)(1+x+---+x Ji - 1 )+v(x)(1+x+---+x*- 1 ) = l+x + --- + x d -\ (11) 
Combining (JTO) and <[TT} gives the required result. □ 
Define F n (x) = 1 + x H hx"~\ for all integers n ^ 1. 

COROLLARY 8.2. If p\,. . . ,p n are distinct primes set m — p\ ■ ■ ■ p„ and m\ = mj pi. Then 
there exist s\,. . . ,s n £ Z[x] such that 

n 
1 

THEOREM 8.3. Let n = p a q$ be a positive integer, where p and q are distinct primes and 
a and P are non-negative integers. Let g € Z[x] such that <t>„(x)|g(x), deg(g) — n — 1 and 
the coefficients of g are all non-negative. 

1. If a ^ 1 and p = then 

g{x)=s{x)<S> p {x n IP), (12) 
for some s 6 Z[i] with non-negative coefficients. 

2. If a ^ 1 and P ^ 1 then there exist ii ,52 G 1\x] such that 

g(x) = Sl {x)<t> p {x n 'P)+ Sz (x)<S> q {x n l«), (13) 
and the coefficients of s\ and si are all non-negative. 
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Proof. We begin by proving that there exist elements s or s ; - in Z[x] such that M2\ or (II 31 
holds, as appropriate, and subsequently show that s or the s, may be chosen so that their 
coefficients are non-negative. 

If n = p a then yields <l> n (x) = <P p (x"/ p ), so we may write g(x) = s p (x)<t>„(x) = 
5p(x)<J>p(jc"/ p ), with s p G Z[x], as required. Assume then that a ^ 1 and (3 1. As <t>, = /> 
when r is prime, we have 

and 

W 9 )=n*M x ')- (i5) 

Write 

g(x) =/(*)*„(*), where/ G Z[x]. (16) 

From Corollary 18.21 there are polynomials si and $2 G Z[x] such that 1 = s\ (x)F p {x) + 
S2(x)Fq(x). Let k = n/pq and replace x with xr in the previous equality to obtain 1 = 
si(x k )F p (x k )+s 2 (x k )F q {x k ). Multiplying through by /(*) gives /(x) = s p (x)F p (x k )+s q (x)F q \ 
for some G Z[x]. Hence g(x) = (i p (x)F p (x* : ) + j £/ (x)/^ (jc 4 ))"!>„ (jc) . Applying dl4> and 
dl5> . with n/q and «//> in place of n, respectively, we obtain 

g{x)= is p (x) J] */>««*(*)+*«(*) f] <D 9 p d (x) U> n 

d\p a d 

= s p {x)F p {x n IP)+ Sq {x)F q {x n l^ 

using dl4> and dl5> again. Thus we have s p and s c/ G Z[x] as required. Next we shall show 
that s p and s q may be chosen so that their coefficients are all non-negative. 

Note that as deg(g) = n — 1 and deg(/v) = r — 1 we have deg(s p ) ^ n/p — 1 and 
Aeg(s q ) ^n/q—1. Let n p = n/p and « t/ = n/g. Then we may write 



s p (x) = mo + «i->H |-z<n p -ix" p 1 and s q (x) = vq + v\x-\ hv n? _ix"« 1 



for suitable and v* G Z. Set A p (V) = s p (x)F p (x n p) and A^x) = 5 <? (x)/^(x" < '). If ^ r < n 
then the coefficient of x r in A p (x) is £m 7 ', where the sum runs over those j such that ^ 
j < n p and j + kn p = r, for some k G Z. There is a unique pair (£,/) with this property, for 
each such r. Hence the coefficient of x r in A p (x) is Uj, where j is the unique integer such 
that ^ j < n p and r = y'( mod « p ). If (3 = then g(x) = A p (x) and it follows that the u/s 
are all non-negative and the result follows with s = s p . Assume from now on that p 1. 
Then the coefficient of x r in A q (x) is m;, where I is the unique integer such that ^ I < n q 
andr = /( modnA. 

Lett/ = gcd(n p ,n q ) = p a ~ l q$~ l . For j = 0, . . . ,d — 1 define 

s P-j( x ) = H u id+j x "' +j 
i=() 
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and 



p-i 

i=0 



id+j 



Then 




sp{x) = L s pj( x ) and s «W = L *?,/(*)• 

/=o ;=o 



Fix j and a with 0^j<d and ^ a < q. If ^ Z < n q then there exists r such that ^ r < n 
with r = ad + j( mod n p ) and r = /( mod n q ) if and only if ad + j = l( mod d) (using 
the Chinese Remainder Theorem) if and only if / = bd + j, for some b € Z. Moreover, 
s$ b < p, as s$ I < n q . 

Therefore, for all j, a, b with Q^j<d,Q^a<q and ^ b < p, there exists an integer 
r = r(j,a,b), unique modulo n, such that 



Conversely, if ^ r < n then there exist j,a,b in the above ranges, such that (I17t holds. 
For fixed j with ^ j < d define 

Cj = mm{u c , d+jl v b d+j :0^a<q,0^b<p}. 

If cj ^ define t p j = s p j and t q j = s q j. If cj < then there is some a or b such that 
c j = u ad+j or Cj = \'bd+j- Suppose that Cj = u a d+j < 0. Since n r ^ 0, for r = 0, . . . ,n — 1, 
it follows from d!7i that «„</+/ + Vbd+j ^ and so \'bd+j ^ for b = 0, ...,p— 1. By 
definition, m ic / +7 ^ c ; -, for z = 0, . . . — 1, so setting 



the polynomials f„ ,■ and f„ ; - have non-negative integer coefficients. If Cj ^ u a d+j but Cj = 
vt,d+j, for some b, we construct t„ ; and f„ ,■ in the same way, reversing the roles of p and q, 
and obtain the same result. 

Now fix j such that Cj < 0. Assume that Cj = u ac [ + j. Then 



t p ,{x)F p {^P)+t Ch j{x)F q {x»l«) = s p ,{x)F p {^n+s Ch j{x)F q {x»l«) 

+ |cMW') - F p {x d )F q (x n l«)) (18) 



H,. = Uad+j + Vbd+j ■ 



(17) 



and 




^■(x)-| C7 -^F p (x rf ) 



We have 



F q (/)F p (x*'>)=F 9 (* 




d\p a ~ l e\qV 




d\p a e\qV~ l 



n^w n 

rfln« „I„B-1 



F,(*»/«)F P (A 
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Therefore, from (1181 

t P)j {x)F p {x n IP)+t qJ {x)F q {x n ^) = s p ,j{x)F p {x n IP)+s qJ {x)F q {x n l<i). (19) 
Now define 

d-\ 

s i(x) = Y^ f p-A x ) 

7=0 

and 

d-\ 

Then the coefficients of s\ and s 2 are non-negative and it follows from H9\ that 

g(x) = s p {x)F p { X "l»)+s q {x)F q {x"l«) = s l (x)F p (x n ^)+s 2 (x)F q (x n ^), 
as required. □ 
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